Application No. 10/710,982 Docket No.: 22040-0003 7-US1 

Amendment in Response to Office Action of August 6, 2008 

AMENDMENTS TO THE CLAIMS 



This Listing of Claims will replace all prior versions and listings of claims in this 
application. 

Listing of Claims: 

1. (Currently Amended) An encryption apparatus, comprising: 

a plurality of ports to at least one of which a terminal having an encrypting capability can 
be directly or indirectly connected; 

encryption/decryption means for performing an encrypting process and a decrypting 
process on data to terminate encryption-based security between the terminal having the 
encrypting capability and/or-the non-encrypting capability; and 

bridge means in a data link layer for allowing data, which has been received with one of 
the plurality of ports and then on which the encrypting or decrypting process has been 
performed, to be outputted as it is from another port without being performed any routing 
process at a network layer being performed . 

2. (Previously presented) The encryption apparatus according to claim 1, wherein the 
encryption/decryption means performs the encrypting process and the decrypting process on 
data, so that the encryption apparatus receives and retransmits data in the form of encrypted data 
from and to the terminal having the encrypting capability, and the encryption apparatus receives 
and retransmits the data in the form of non-encrypted data from and to the terminal having no 
encrypting capability. 

3. (Previously Presented) An encryption apparatus, comprising: 

a plurality of ports to at least one of which a terminal having an encrypting capability can 
be directly or indirectly connected; 

encryption/decryption means for performing an encrypting process or a decrypting 
process on data which has been received with one of the plurality of ports and then has passed 
through a physical layer and a data link layer; and 
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bridge means in the data link layer for passing the encrypted or decrypted data to the data 

link layer and the physical layer without passing said data to a network layer in which routing 

between networks is controlled, and then sending said data to another port so as to be outputted 

from said port. 

4. (Original) The encryption apparatus according to claim 3, further comprising setting 
information storage means for storing setting information for controlling the encrypting process 
and the decrypting process, wherein the encryption/decryption means controls the encrypting 
process and the decrypting process by comparing the setting information stored in the setting 
information storage means with header information of a data packet of the data received with one 
of the plurality of ports. 

5. (Previously Presented) An encrypting method for performing an encrypting process and 
a decrypting process using an encryption apparatus, the apparatus having a plurality of ports to at 
least one of which a terminal having an encrypting capability can be directly or indirectly 
connected, the method comprising the steps of: 

performing the encrypting or decrypting process on data which has been received with 
one of the plurality of ports and then has passed through a data link layer and a physical layer; 
and 

outputting the encrypted or decrypted data from another port through the physical layer 
and bridge means in the data link layer, without passing said data to a network layer in which 
routing between networks is controlled. 

6. (Original) An encryption system, comprising: 

an encryption apparatus according to claim 1; and 

a terminal having an encrypting capability which can be connected to the encryption 
apparatus through a wireless or cable network. 

7. (Original) An encryption system, comprising: 
a terminal having an encrypting capability; 

a terminal having no encrypting capability; and 
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an encryption apparatus according to claim 2 which can be connected between the 

terminal having the encrypting capability and the terminal having no encrypting capability 

through a wireless or cable network. 

8. (Original) The encryption apparatus according to claim 2, wherein the 
encryption/decryption means performs the decrypting process on encrypted data and then 
sending said data to a terminal having no encrypting capability when the encryption apparatus 
receives said encrypted data form another terminal having an encrypting capability and 
retransmits said data to the terminal having no encrypting capability, and performs the 
encrypting process on non-encrypted data and then sending said data to a terminal having an 
encrypting capability when the encryption apparatus receives said non-encrypted data form 
another terminal having no encrypting capability and retransmits said data to the terminal having 
the encrypting capability. 

9. (New) The apparatus of claim 1, wherein the bridge means is an IP-Sec bridge and data 
transmission processes are carried out in layers lower than the network layer. 

10. (New) The apparatus of claim 3, wherein the bridge means is an IP-Sec bridge and data 
transmission processes are carried out in layers lower than the network layer. 

1 1 . (New) The method of claim 5, wherein the bridge means is an IP-Sec bridge and data 
transmission processes are carried out in layers lower than the network layer. 
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